lucbu/angkor-cms
The license files identify LGPL-2.1 while the manifest declares MIT, and the linked repository does not name or mention this package. A readme, tests, and a stable release provide useful structure, but they do not offset the long inactivity.
30%
Total Score
50
63
50
Health Score Breakdown
The manifest declares MIT, but the artifact contains an LGPL-2.1 license file; this mismatch creates material uncertainty about the terms consumers receive.
Composer install, update, and project-creation scripts run during package operations. These are operationally significant and increase adoption risk, though they do not by themselves show abandonment.
The package has had only two releases, both in November 2015, with no releases in the last 12 months and an age of over 10 years. This is strong evidence of abandonment.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's decade-long release gap.
The repository name does not match the package name and its README does not mention the package, weakening confidence that the linked source repository actually corresponds to this release.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/framework Version 5.1.* | — | — |
laravelcollective/html Version ~5.0 | — | — |
barryvdh/laravel-debugbar Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.